Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fvCTDIfWChK64hGbaHi7bQ5oyJ8.roa
File: fvCTDIfWChK64hGbaHi7bQ5oyJ8.roa (raw, json)
Hash identifier: LnKwDv8JWNj5/ZAwKieSuKDGJRN4BFDdUHkEcUr+Cw0=
Subject key identifier: 7E:F0:93:0C:87:D6:0A:12:BA:E2:11:9B:68:78:BB:6D:0E:68:C8:9F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 223C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fvCTDIfWChK64hGbaHi7bQ5oyJ8.roa
Signing time: Mon 26 Aug 2024 05:33:48 +0000
ROA not before: Mon 26 Aug 2024 05:33:48 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24163
IP address blocks: 61.61.208.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:17:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8764 (0x223c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:48 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7EF0930C87D60A12BAE2119B6878BB6D0E68C89F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a0:92:8e:e6:d1:6f:d8:24:0c:5b:65:65:09:
c8:02:43:f4:98:4d:c3:bf:99:71:c6:45:ab:f4:a8:
88:ce:38:90:ee:7a:83:7d:54:2f:76:07:6a:96:ab:
c3:94:77:c1:5c:5c:2f:31:a0:cb:4c:00:1a:35:80:
0d:46:d3:4c:d1:2f:50:b1:c5:57:cf:83:61:a5:13:
f2:f5:a2:62:14:53:68:ab:c4:07:1e:56:85:e2:30:
01:d6:07:d6:cb:f3:19:9f:fa:39:26:e5:50:1b:87:
7b:a2:be:07:e8:f9:61:40:da:d6:bd:ed:78:8f:65:
17:b1:21:3d:0d:f7:09:a2:65:c9:36:52:e4:57:16:
a9:22:55:1b:be:4e:31:c7:73:2b:7d:22:60:e2:94:
78:47:2d:22:dd:46:ed:f2:9c:4c:f5:59:02:1d:a9:
0c:5d:56:5b:a7:ed:17:72:ad:fa:52:1f:4d:17:0c:
fa:b7:2e:a5:83:0a:7c:db:cb:8c:1f:3a:3d:e5:b2:
06:93:a2:50:34:7b:a5:2e:cb:55:72:62:55:4d:de:
27:e5:0c:c4:c7:5d:86:34:3c:f9:5c:9b:01:bd:5b:
c8:a2:2d:9b:5c:f5:df:a8:c5:3c:e5:35:7d:fc:61:
6d:18:c1:2d:6c:53:33:8c:b6:e4:29:01:78:44:e4:
bd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F0:93:0C:87:D6:0A:12:BA:E2:11:9B:68:78:BB:6D:0E:68:C8:9F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fvCTDIfWChK64hGbaHi7bQ5oyJ8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.208.0/21
Signature Algorithm: sha256WithRSAEncryption
96:f7:62:57:31:98:3e:bd:c7:80:97:6e:fc:ab:64:07:64:ff:
f2:81:fc:ff:02:78:86:5e:7a:b7:05:3c:37:38:a9:65:37:d4:
e6:b6:2f:70:5d:a0:43:37:23:08:c5:5d:87:ea:f1:7a:e0:a0:
b5:f3:71:bf:86:f1:78:d6:dc:b6:7b:ff:26:67:51:16:49:6f:
a8:05:9e:3b:55:ab:7f:48:69:fc:ca:3c:19:37:78:f9:9d:d1:
56:f7:f2:b1:5e:d5:eb:95:c6:18:60:6b:1c:e3:4b:5c:14:bf:
b8:8e:a3:b1:c9:7d:98:15:00:3a:a3:cc:5a:55:4b:b9:13:c5:
08:10:92:e6:f9:ae:a6:29:ac:4b:2b:d0:f5:91:46:b7:6e:16:
0b:92:56:56:76:3c:af:88:8c:67:ca:47:a8:2f:1d:2c:eb:2a:
7e:d7:a2:49:e8:3f:f1:a7:15:6e:7c:77:8f:50:d7:58:31:e9:
d1:ed:cb:42:4d:38:26:89:0c:08:fe:5e:c3:d5:cd:b2:44:62:
a7:e6:7c:f8:9b:c9:21:29:6a:f9:fb:86:f1:56:60:26:e5:79:
3b:8f:8a:6c:d5:4f:2d:b2:79:03:30:6f:81:d4:69:27:b1:87:
d9:1e:ce:19:af:af:2f:27:ec:fb:66:e4:06:b4:4b:4a:6d:10:
82:13:1a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:29:23 2025 by rpki-client